Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability

Vulnerability

The Cisco SD-WAN vManage software web-based management interface contains a stored cross-site scripting (XSS) vulnerability due to insufficient validation of user-supplied input. An authenticated, remote attacker can exploit this by persuading a user to click a crafted link. The vulnerability affects versions prior to 19.2.2 [1].

Exploitation

An attacker must have authenticated access to the vManage instance. The attacker crafts a malicious link containing the XSS payload and convinces a legitimate user to click it. The payload is stored on the server and executed when other users view the affected page, leading to persistent script execution [1].

Impact

Successful exploitation allows the attacker to execute arbitrary script code in the context of the victim's browser session. This can lead to disclosure of sensitive browser-based information, session hijacking, or unauthorized actions performed on behalf of the victim [1].

Mitigation

Cisco released a fix in vManage software Release 19.2.2. Customers should upgrade to this or a later version. No workarounds are documented in the advisory [1].